This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/ad64bb-d539-4a8e-b0e6-5f89b885f729/1/6Nh4qlMIGJO6UoUk7xQ-qScTkrg.mft File: 6Nh4qlMIGJO6UoUk7xQ-qScTkrg.mft (raw, json) Hash identifier: DOmykJ4T0ecPlBw8Fi+u5ihWQpcfN53VVzrHXDUkXyM= Subject key identifier: A6:CA:8C:9B:37:68:50:B7:88:12:3F:2D:44:13:72:8B:F4:66:DD:49 Authority key identifier: E8:D8:78:AA:53:08:18:93:BA:52:85:24:EF:14:3E:A9:27:13:92:B8 Certificate issuer: /CN=e8d878aa53081893ba528524ef143ea9271392b8 Certificate serial: 019B3D59A0A067C40A222A252980EBBF30D6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6Nh4qlMIGJO6UoUk7xQ-qScTkrg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/ad64bb-d539-4a8e-b0e6-5f89b885f729/1/6Nh4qlMIGJO6UoUk7xQ-qScTkrg.mft Manifest number: 1787 Signing time: Sat 20 Dec 2025 20:00:42 +0000 Manifest this update: Sat 20 Dec 2025 20:00:42 +0000 Manifest next update: Sun 21 Dec 2025 20:00:42 +0000 Files and hashes: 1: 5sx0qR-B9y6mGDgRbtSLnw5KGsw.roa (hash: Nyr6wmMl755m5pBB7dzD6+3NgxbHjvOEn2wkeXz+Yqw=) 2: 6Nh4qlMIGJO6UoUk7xQ-qScTkrg.crl (hash: zcIDELGs1jQB52RY+FKUyBAhm+41zLpCDp50gR9Vo7w=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/ad64bb-d539-4a8e-b0e6-5f89b885f729/1/6Nh4qlMIGJO6UoUk7xQ-qScTkrg.crl rsync://rpki.ripe.net/repository/DEFAULT/a4/ad64bb-d539-4a8e-b0e6-5f89b885f729/1/6Nh4qlMIGJO6UoUk7xQ-qScTkrg.mft rsync://rpki.ripe.net/repository/DEFAULT/6Nh4qlMIGJO6UoUk7xQ-qScTkrg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 20:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:59:a0:a0:67:c4:0a:22:2a:25:29:80:eb:bf:30:d6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e8d878aa53081893ba528524ef143ea9271392b8 Validity Not Before: Dec 20 20:00:42 2025 GMT Not After : Dec 21 20:00:42 2025 GMT Subject: CN=a6ca8c9b376850b788123f2d4413728bf466dd49 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:0d:ce:a9:15:84:a9:12:ed:68:33:eb:dc:e1: 29:79:da:77:a6:53:66:ee:de:02:d5:38:2e:93:c1: 10:92:c9:9d:bc:b4:ee:d8:03:c7:d5:12:de:99:cc: a8:58:d7:ab:74:d3:af:c3:ee:fc:28:75:69:9f:2c: 0a:2f:9e:1a:26:1b:84:1f:5d:3b:45:98:f0:90:9f: 3e:e4:67:a6:6e:9c:a3:40:ba:6c:78:2b:83:aa:02: 3c:89:d2:d6:ba:7e:41:7e:16:98:82:87:7e:48:a8: 90:fd:f8:42:04:bb:22:d4:e6:cd:72:7d:8c:48:a1: 85:e8:cb:02:55:d5:0b:20:ee:1c:fe:8a:fd:c1:33: fd:ea:72:ca:5d:ec:08:b4:31:88:a4:db:52:b9:74: 9d:99:67:0d:98:44:07:c2:81:41:6e:d4:e4:00:86: 6f:9f:37:7b:04:f4:3b:97:9a:c7:62:7c:0b:77:4f: 06:66:28:74:16:67:60:55:94:d9:c5:c8:cc:5f:8c: cc:d8:47:a4:df:89:78:1d:5f:08:93:55:d1:3b:c4: 8d:d5:24:9b:ce:17:98:70:56:eb:83:35:cc:3a:c8: 32:7a:85:9c:6a:ff:81:95:8c:d6:fa:6a:3f:40:3d: a3:a7:ea:6f:c1:b6:05:1c:b0:8f:6d:16:5c:dd:17: 57:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:CA:8C:9B:37:68:50:B7:88:12:3F:2D:44:13:72:8B:F4:66:DD:49 X509v3 Authority Key Identifier: keyid:E8:D8:78:AA:53:08:18:93:BA:52:85:24:EF:14:3E:A9:27:13:92:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6Nh4qlMIGJO6UoUk7xQ-qScTkrg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/ad64bb-d539-4a8e-b0e6-5f89b885f729/1/6Nh4qlMIGJO6UoUk7xQ-qScTkrg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/ad64bb-d539-4a8e-b0e6-5f89b885f729/1/6Nh4qlMIGJO6UoUk7xQ-qScTkrg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 76:ea:54:57:f8:a6:75:7d:94:3c:f4:d6:54:7a:a8:82:a5:66: d4:02:0c:33:f4:ee:25:92:75:f8:f1:78:70:ea:4d:02:02:b4: 24:59:d6:37:5b:f1:c7:04:3b:27:21:93:30:83:dd:f1:50:46: d6:1d:d3:2a:d7:55:75:e3:db:71:6a:18:a6:58:fd:9b:1a:ad: 5c:db:32:64:ff:8d:ff:a3:f0:34:56:31:75:b4:1d:88:3d:e3: 96:77:59:31:89:ef:22:df:18:bb:43:6a:fd:6c:ee:ba:d5:62: 40:10:d4:12:d2:8d:91:ac:fb:b3:37:42:4b:c2:ba:c5:e1:1d: 35:69:f0:2e:70:ba:5c:e2:02:72:a1:d8:6f:eb:fe:6a:23:04: d2:b4:08:ad:7a:1b:c4:1d:1f:f0:7c:a1:a2:0c:f0:05:9e:05: b8:9c:64:00:ec:72:f2:e1:2b:4d:d4:61:3c:18:00:6a:da:f1: d9:f0:95:da:4b:27:4e:b9:45:66:73:99:16:49:0b:e8:e1:18: 49:c0:0f:3b:96:48:8b:19:7b:91:26:b5:0f:f8:b0:86:b6:6d: 43:20:ef:cf:fc:cf:c7:df:a2:cd:ba:be:d3:14:4d:e1:7f:5f: 1a:49:65:e8:43:81:e3:f3:8d:c7:1f:22:d1:a8:28:b3:0d:3e: 31:77:d6:6d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9WaCgZ8QKIiolKYDrvzDWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU4ZDg3OGFhNTMwODE4OTNiYTUyODUyNGVmMTQzZWE5Mjcx MzkyYjgwHhcNMjUxMjIwMjAwMDQyWhcNMjUxMjIxMjAwMDQyWjAzMTEwLwYDVQQD EyhhNmNhOGM5YjM3Njg1MGI3ODgxMjNmMmQ0NDEzNzI4YmY0NjZkZDQ5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArQ3OqRWEqRLtaDPr3OEpedp3plNm 7t4C1Tguk8EQksmdvLTu2APH1RLemcyoWNerdNOvw+78KHVpnywKL54aJhuEH107 RZjwkJ8+5GembpyjQLpseCuDqgI8idLWun5BfhaYgod+SKiQ/fhCBLsi1ObNcn2M SKGF6MsCVdULIO4c/or9wTP96nLKXewItDGIpNtSuXSdmWcNmEQHwoFBbtTkAIZv nzd7BPQ7l5rHYnwLd08GZih0FmdgVZTZxcjMX4zM2Eek34l4HV8Ik1XRO8SN1SSb zheYcFbrgzXMOsgyeoWcav+BlYzW+mo/QD2jp+pvwbYFHLCPbRZc3RdXTQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKbKjJs3aFC3iBI/LUQTcov0Zt1JMB8GA1UdIwQY MBaAFOjYeKpTCBiTulKFJO8UPqknE5K4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNk5oNHFsTUlHSk82VW9Vazd4US1xU2NUa3JnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNC9hZDY0YmItZDUzOS00YThlLWIwZTYt NWY4OWI4ODVmNzI5LzEvNk5oNHFsTUlHSk82VW9Vazd4US1xU2NUa3JnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNC9hZDY0YmItZDUzOS00YThlLWIwZTYtNWY4OWI4ODVmNzI5 LzEvNk5oNHFsTUlHSk82VW9Vazd4US1xU2NUa3JnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdupUV/im dX2UPPTWVHqogqVm1AIMM/TuJZJ1+PF4cOpNAgK0JFnWN1vxxwQ7JyGTMIPd8VBG 1h3TKtdVdePbcWoYplj9mxqtXNsyZP+N/6PwNFYxdbQdiD3jlndZMYnvIt8Yu0Nq /WzuutViQBDUEtKNkaz7szdCS8K6xeEdNWnwLnC6XOICcqHYb+v+aiME0rQIrXob xB0f8HyhogzwBZ4FuJxkAOxy8uErTdRhPBgAatrx2fCV2ksnTrlFZnOZFkkL6OEY ScAPO5ZIixl7kSa1D/iwhrZtQyDvz/zPx9+izbq+0xRN4X9fGkll6EOB4/ONxx8i 0agosw0+MXfWbQ== -----END CERTIFICATE-----Generated at Sun Dec 21 05:27:43 2025 by rpki-client